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10 60/194,354 for METHODS AND APPARATUS FOR TAGGING HTML TRAFFIC filed on 
April 3, 2000 ? the entire disclosure of which is incorporated herein by reference for all 
purposes. 



BACKGROUND OF THE INVENTION 
15 The present invention relates to network communications and, more specifically, to 

methods for monitoring, tagging, and redirecting traffic in network communication systems. 

Any business traveler who relies on network communications to maintain contact with 
clients and the home office appreciates the availability of fast and reliable data ports at remote 
locations such as airport lounges and hotel rooms. The hospitality industry has only recently 
20 begun to understand the necessity of providing such high speed data connections to business 
travelers. In fact, given the explosive growth of network technologies and the corresponding 
dependence of the business professional on such technologies, hotels which do not move to 
provide high speed connectivity in guest rooms comparable to the typical office environment 
will likely lose a substantial portion of their business to hotels which do. 
2 5 Unfortunately, many hotel rooms are not currently wired to accommodate high speed 

data traffic. That is, prior to 1990, virtually all hotel rooms were wired to provide only basic 



telephone service. As late as 1995, less than 10% of hotel rooms were wired to handle 
standard Ethernet data speeds. Even today, while the major players in the hospitality industry 
are searching for high speed connectivity solutions, the vast majority of hotel guest and 
conference rooms are still wired with low quality, single pair connections. One obvious 
solution would be to completely rewire all of the guest and conference rooms in each hotel 
facility to provide the desired data transmission capabilities. However, given the prohibitive 
cost of such an undertaking, a less costly solution would be desirable. 

Even if such a costly rewiring were undertaken, there are other problems which are 
not addressed by an infrastructure upgrade. For example, even if a high speed connection to 
the hotel's host is provided, it will often be the case that a guest's laptop computer would be 
incompatible with the hotel network in some way. Thus, each guest's laptop must be 
configured appropriately in order to communicate with the network and with the Internet 
beyond. This would likely involve loading special software onto a guest's laptop each time 
the guest wants to go online. Not only would such a process be cumbersome and annoying to 
the hotel guest, it may also be unacceptable from the guest's point of view in that 
reconfiguring the laptop may interfere with the current configuration in undesirable ways. 

Neither does a costly wiring upgrade address the administrative and security issues 
related to providing Internet access via a hotel host. That is, high speed Internet access for 
hotel guests requires a network at the hotel property and some sort of connection between 
the hotel network and the Internet, e.g., a Tl or T3 line. A firewall at each hotel property 
would also be required to protect the internal network from unauthorized access. The 
existence of the firewall at each property, in turn, requires that most of the control and 
administration of the local network be performed at the hotel property rather than remotely, 
thus representing an undesirable redundancy of administrative functions. 



3 

Another administrative difficulty related to maintaining each hotel property as a 
separate Internet host involves the management of IP addresses. Ranges of globally unique 
32-bit IP addresses are issued to organizations by a central Internet authority. These 
addresses are organized in a four octet format. Class A EP addresses are issued to very large 
5 organizations and employ the first of the four octets to identify the organization's network 
and the other three to identify individual hosts on that network. Thus, a class A address pool 
contains nearly 17 million (2 24 ) globally unique IP addresses. With class B addresses, the first 
two octets are used to identify the network and the last two to identify the individual hosts 
resulting in 64,000 (2 16 ) globally unique IP addresses for each organization. Finally, with 
10 class C addresses, the first three octets are used to identify the network and the last octet to 
identify the individual hosts resulting in only 256 (2 s ) globally unique EP addresses for each 
organization. 

Unfortunately for many medium to large size organizations (1,000 to 10,000 hosts), it 
has become very difficult, if not impossible, to obtain anything other than a class C address 

15 for their networks due to the fact that the class A and B address spaces have been almost 

entirely locked up. This problem has been addressed to some extent by the use of a Network 
Address Translation (NAT) protocol. According to such a protocol, when a local host on an 
organization's network requests access to the Internet, it is assigned a temporary IP address 
from the pool of globally unique IP addresses available to the organization. The local host is 

20 identified by the globally unique address only when sending or receiving packets on the 

Internet. As soon as the local host disconnects from the Internet, the address is returned to 
the pool for use by any of the other hosts on the network. For additional details on the 
implementation of such a protocol please refer to K Evegang and P. Francis, The IP Network 
Address Translator (NAT), Request for Comments "RFC" 1631, Cray Communications, 
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NTT, May 1994, the entirety of which is incorporated herein by reference for all purposes. 

Such dynamic assignment of IP addresses might be sufficient for certain organizations 
as long as the number of simultaneous users which require access to the Internet remains 
below the maximum of 256. However, if, for example, a 1200 room hotel were hosting an 
5 Internet technologies seminar it would be extremely likely that the demand for Internet access 
would exceed the available address pool. AIL of this also assumes that a major hotel chain 
would be able to obtain a complete class C pool of addresses for each of its properties; not 
necessarily a reasonable assumption. 

It is therefore desirable to provide methods and apparatus by which each of the 
l o properties in a major hotel chain may provide high speed Internet access to each of its guest 
rooms in a secure, inexpensive, and reliable manner without undue administrative burdens on 
the individual properties. 
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SUMMARY OF THE INVENTION 
According to the present invention, methods and apparatus are provided which make 
use of existing hotel wiring infrastructures to provide secure, high speed data and Internet 
access to each of the guest rooms in a hotel property. According to one embodiment of the 
5 invention, each guest room in the hotel is interconnected via the hotel's current wiring 

infrastructure into a local network. When a guest wishes to access the Internet, he connects 
his laptop to an in-room module installed in each guest room which temporarily assigns a 
"fake" local IP address to the guest's laptop. The "fake" local IP address is associated with 
the in-room module and is unique on the hotel's local network, The address is 'Take" in that 
10 it is not a valid Internet address and in that it replaces the laptop's own real IP address. The 
assigned local IP address uniquely identifies the guest's laptop on the hotel network while 
that laptop remains connected to the in-room module. 

A headend module in the hotel handles packet routing and provides access to the 
Internet. In facilitating access to the Internet, the headend module temporarily assigns 
15 globally unique IP addresses from a pool of, for example, class C addresses to in-room 
modules in individual guest rooms in response to requests for Internet access from those 
rooms. An assigned DP address remains dedicated to a particular in-room module (and thus 
the associated guest's computer) for the duration of the Internet transaction. Upon 
termination of the transaction, the globally unique IP address is disassociated from the in- 
2 o room module and put back into the pool for use in facilitating a later Internet transaction from 
any of the hotel's rooms. 

According to another embodiment of the invention, the local networks of a number of 
hotels are interconnected via a remote server thereby forming a private wide area network, or 
a virtual private network. The operation of the virtual private network to provide high speed 
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data and Internet access to individual guest rooms is similar to the process described above 
except that the "fake" IP address of the in-room modules are unique over the entire virtual 
private network, and the temporary assignment of globally unique IP addresses is performed 
by the remote server rather than the hotel headend. This is advantageous in that it is 
5 contemplated that the remote server has a larger pool of such addresses associated therewith 
than an individual hotel network might be able to procure (e.g., a class B address pool). 

Thus, because the IP address needs of all of the hotels in the virtual private network 
are spread out over the entire installed base of the remote server, bursts of need at any one 
property which exceed the capacity of a single class C address pool may be accommodated. 

10 The virtual private network embodiment of the present invention also has the advantage that 
firewall security and other network administrative functions may be centralized and performed 
remotely without compromising the security of any individual hotel network. 

According to various additional embodiments, the processing power of the in-room 
module of the present invention is employed to monitor the data being transmitted to and 

15 from the connected computer, and to provide a variety of functions based on the nature of the 
transmissions being monitored. For example, the in-room module may determine the 
destination of data transmissions from the computer by parsing and HTML string or looking 
at the TCP connection. Then, depending on the destination, the in-room module can perform 
various functions such as tagging the transmissions, framing pages sent to the computer in 

20 response to the transmission, or redirecting the transmissions for processing at some other 
location, e.g., an associated server. 

Thus, according to the present invention, methods and apparatus are provided for 
providing access to a network via a first one of a plurality of network access nodes in the 
network. The network access nodes each have a network address associated therewith which 
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is unique on the network, the first network access node having a first network address 
associated therewith. The first network address is associated with a first computer while the 
first computer is connected to the first network access node thereby providing access to the 
network. Transmissions associated with the first computer are monitored to determine 
5 address information. The transmissions are then processed in response to the address 
information. 

A further understanding of the nature and advantages of the present invention may be 
realized by reference to the remaining portions of the specification and the drawings. 



BRIEF DESCRIPTION OF THE DRAWINGS 
Fig. 1 is a block diagram illustrating the provision of high speed data and Internet 

access to guest rooms in a hotel according to a specific embodiment of the invention; 

Fig. 2 is a flowchart illustrating a method for providing high speed data and Internet 

access to guest rooms in a hotel according to a specific embodiment of the invention; 

Figs. 3a and 3b are more detailed block diagrams of the in-room module and head-end 

module of Fig. 1; 

Fig. 4 is a block diagram illustrating the combination of half duplex data and standard 
telephone data on a single pair of conductors according to a specific embodiment of the 
invention; 

Fig. 5 is a block diagram illustrating the provision of high speed data and Internet 
access to guest rooms in hotels according to another specific embodiment of the invention; 

Fig. 6 is a block diagram illustrating the provision of high speed data and Internet 
access to guest rooms in hotels according to yet another specific embodiment of the 
invention; and 

Fig. 7 is a flowchart illustrating providing network access and the selective processing 
of data transmissions according to a specific embodiment of the present invention. 
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DESCRIPTION OF SPECIFIC EMBODIMENTS 
Fig. 1 is a block diagram illustrating the provision of high speed data and Internet 
access to guest rooms in a hotel network 100 according to a specific embodiment of the 
invention. In each guest room 102 is an in-room module (IRM) 104 by which a telephone 
5 106 and a guest's laptop computer 108 may be connected to the hotel's wiring infrastructure. 
According to a specific embodiment, IRM 104 is plugged directly into the room's phone jack 
and has at least two additional ports, one for the room's telephone, e.g., an RJ-1 1 jack, and 
one for the guest's laptop, e.g., an RJ-45 Ethernet port. According to various embodiments, 
IRM 104 performs a number of functions including, for example, combining and separating 
10 Ethernet data and standard telephone signals for transmission over the hotel's wiring 
infrastructure. According to other embodiments and as discussed below, IRM 104 is 
configured to receive control information from a central location for automated control of 
various room environmental parameters, e.g., temperature and lighting. According to still 
other embodiments, IRM 104 is configured to receive a wide variety of other types of data 
1 5 such as, for example, digital audio and video for presentation in the guest room, or a wide 
variety of other information services. 

Transmission line 1 10 connects IRM 104 to the hotel's head-end 1 12 via any of a 
wide variety of infrastructures. In the example shown, standard telephone transmission line 
1 10 connects IRM 104 to head-end 1 12. It will be understood, however, that the wiring 
20 between IRM 104 and head-end 1 12 may take other forms such as, for example, a four- 
conductor Ethernet transmission line. Head-end 1 12 comprises a main distribution frame 
(MDF) punch down block 1 16, a public branch exchange (PBX) punch down block 1 18, and 
a public branch exchange (PBX) 120. Interposed between punch down blocks 1 16 and 1 18 is 
an HEM punch down block 122. Standard telephone signals pass through punch down block 
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122 to PBX 120 while half duplex Ethernet data packets are transmitted and received by 
head-end module (HEM) 124. This splitting of the telephone signals and data packets may be 
effected by any of a variety of filtering techniques as represented by filters 1 19 and 121. As 
will be understood, these filters may be incorporated into punch down block 122 or be 
separate devices. Additional filtering may also be provided to further mitigate undesirable 
effects from having voice and data on the same lines. Such filtering is also represented by 
filters 1 19 and 12 1 . It will be understood that the configuration shown is merely for 
illustrative purposes and is not intended to limit the scope of the invention- 
Depending on the configuration of the present invention, HEM 124 performs a variety 
of functions and, according to some embodiments, can be thought of as an enhanced router 
with additional capabilities programmed into its operating system. That is, according to such 
embodiments, HEM 124 serves as a switch which routes data packets to and fromlRMs 104, 
and serves as the other end of the communications to and from IRMs 104 in which Ethernet 
data and phone signals are combined over single twisted pair technology. According to other 
alternative embodiments, HEM 124 handles address translation and assignment, controls 
network access, and serves as a bridge for Ethernet data transmitted over the hotel's single 
twisted pair infrastructure. HEM 124 has a plurality of ports 126 each of which 
communicates with a corresponding IRM 104. This communication may be individually 
monitored and controlled (by either the IRM or the HEM) thus allowing central hotel 
management of billing and access as well as the ability to generate reports for troubleshooting 
purposes. 

Each IRM 104 (and thus the corresponding HEM port 126) has a fixed EP address 
which may be configured using any of a variety of network management protocols such as, 
for example, the Simple Network Management Protocol (SNMP). If the guest's computer 
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connected to a particular IRM 104 does not have its own internal IP address, the fixed IP 
address of the corresponding IRM 104/HEM port 126 is assigned to the guest's computer 
using the Dynamic Host Configuration Protocol (DHCP) to facilitate access to network 100. 
If the guest's computer already has its own internal IP address, address translation is 
performed between the computer's internal IP address and the fixed IP address of the IRM 
104/HEM port 126. According to various embodiment of the invention, this address 
translation may be performed by either IRM 104 or HEM 124. HEM 124 has a small boot 
ROM (not shown) for basic IP communications and a large flash ROM (not shown) for fully 
functional software and configuration data. This allows for remote software upgrades using, 
for example, an encrypted protocol riding on top of IP. 

Fig. 2 is a flowchart 200 illustrating a method for providing high speed data and 
Internet access to guest rooms in a hotel using the system of Fig. 1. When a guest's 
computer connects to an IRM in any one of the guest rooms, the network IP address 
associated with that IRM is associated with the computer (204). As discussed above, this 
association could mean a DHCP assignment of the network IP address to the guest's 
computer where the computer did not already have an internal IP address. It could also mean 
that the internal IP address of the computer is translated into the network IP address. This 
address assignment/translation may be effected by either the IRM or the HEM. In addition, it 
will be understood that depending on where the assignment/translation occurs it may precede 
or follow 206 described below. The network IP address is associated with the guest's 
computer while it remains connected to the IRM. 

Where the transmission line connecting the IRM to the hotel network comprises a 
single twisted pair of conductors, the data communications between the IRM and the HEM 
are configured so that they may be transmitted substantially simultaneously over the single 
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twisted pair with the standard telephone signals from the phone in the guest room (206). A 
specific technique by which this configuration is effected is described below with reference to 
Figs. 3a and 4. 

Once the connection is established, the communications between the IRM and the 
5 HEM are monitored either periodically or continuously for a variety of purposes (208). This 
information may be used by the hotel for billing purposes or for troubleshooting and 
improving the reliability of the hotel network. 

If an Internet transaction is requested by the guest's computer, a globally unique DP 
address from a pool of such addresses is temporarily associated with the network IP address 

10 currently associated with the guest's computer using, for example, a network address 

translation protocol (210). As discussed above, the pool of addresses could be, for example, 
class A, B, or C addresses. As will be discussed below with reference to Figs. 5 and 6, the 
temporary association of the globally unique IP address may be done by the HEM in the hotel 
or, according to another embodiment, by a remote server which interconnects one or more 

15 hotel properties in a wide area network. When the Internet transaction is complete (212), the 
globally unique IP address is disassociated from the network IP address and put back in the 
pool for use in facilitating subsequent Internet transactions from any of the hotel's guest 
rooms (214). The network IP address remains associated with the guest's computer until the 
session ends, e.g., the computer is disconnected from the IRM or powered down (216), 

20 Figs. 3a and 3b are more detailed block diagrams of IRM 104 and HEM 124 of Fig. 1 ? 

respectively. IRM 104 comprises connection circuitry for connecting the IRM to the room's 
standard telephone jack as well as the room' s telephone and the guest's computer. According 
to various embodiments, the connection circuitry may include RJ-1 1 ports 302 for connecting 
to the phone and 303 for connecting to the wall jack, an Ethernet port 304, a universal serial 
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bus (USB) port 306 for connecting to the guest's computer, and an additional data port 307 
for receiving various types of data. USB port 306 may, in some instances, prove more 
convenient than Ethernet port 304 in that certain network reconfiguration issues don't have to 
be dealt with. In addition, many business travelers often don't travel with the Ethernet dongle 
which is necessary for connecting their laptop's Ethernet port to a network Ethernet port. 
Thus, IRM 104 is operable to translate the laptop's transmissions to the Ethernet standard. 

According to a specific embodiment, IRM 104 also includes transmission circuitry 308 
for transmitting and receiving data on a single twisted pair of conductors of which the 
majority of hotel wiring infrastructures are comprised. According to one embodiment, a 
portion of transmission circuitry 308 is implemented according to the home PNA (Phone-line 
Networking Alliance) standard which allows half duplex data and phone signals on the same 
line as illustrated by the diagram of Fig. 4. According to the home PNA standard, data 
transmissions from IRM 104 to a port 126 of HEM 124 and transmissions from the HEM to 
the IRM are alternated at a frequency in the range of 4-9 MHz, e.g., 7.5 MHz. Because 
standard phone signals exists at a relatively low frequency compared to the home PNA 
modulation frequency, all of the signals may easily exist on a single pair of wires. 

According to a specific embodiment, transmission circuitry 308 is operable to 
associate the network EP address associated with IRM 104 with the guest's computer. That 
is, the address translation or assignment which allows the guest access to the local or wide 
area network is performed by the transmission circuitry in the IRM. According to a more 
specific embodiment, transmission circuitry 308 includes a processing unit 309 based on RISC 
microprocessor which performs the address translation, the combining and separation of 
signals for transmission to the headend, and the routing of the received signals to the 
appropriate IRM port. According to a specific embodiment, processing unit 309 comprises 
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an Intel 80960VH and the appropriate support circuitry. 

According to another specific embodiment, IRM 104 also includes control circuitry 
310 for receiving control information via the hotel's network for controlling one or more 
control systems 311 proximate to the IRM. Such control systems may include, for example, 
the room's temperature control, lighting, and audio systems. In one embodiment, the control 
circuitry includes conversion circuitry 312 for converting the received control information 
into the necessary control signals for actually controlling the in-room control systems. The 
conversion circuitry may include, for example, an RF transmission element 314 (e.g., an 
antenna) for transmitting RF control signals to the various control systems. According to an 
alternative embodiment, conversion circuitry 312 includes an infrared transmission element 
(e.g., an IR diode) for transmitting infrared control signals to various control systems. 

Transmission circuitry 308 (using processor 309) discriminates between the various 
data it receives and directs it to the appropriate port on IRM 104 according to address 
information in data packet headers. According to a specific embodiment, digital audio and 
video may be transmitted to individual rooms via the system described herein. The digital 
audio and video are directed to additional data port 307 to which an audio and/or video 
system may be connected for presenting the transmitted content. In this way, an ambience 
may be set for the guest's arrival. In addition, the guest could select a wide variety of 
entertainment and information services via the hotel network which may then be transmitted 
to the guest's room via the auxiliary data port 307 on IRM 104. 

Specific embodiments of IRM 104 also include an LED or LCD display 316 on which 
status and other information may be communicated to the occupant of the guest room 
whether or not they are currently connected. For example, before a connection is made, 
display 316 could be used to inform the hotel guest of all of the services available through 
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IRM 104 as well as instructions for connecting to IRM 104. Other information such as stock 
quotes and weather information may also be presented continuously or periodically. Once 
connected, display 316 could communicate the status of the connection as well as the time 
connected and current connection charges. It will be understood that a wide variety of other 
information may be presented via display 316. 

IRM 104 may also include an array of individual colored LEDs 318 which provide 
information to the user. Such LEDs may indicate, for example, the connection status of the 
IRM, Le., whether it is connected to the HEM, using red or green LEDs. LEDs 318 may also 
be configured to indicate a purchase status to the user. That is, because connection services 
are often purchased in 24 hour blocks, LEDs 318 may indicate to the user whether she is 
operating within a block of time which has already been paid for (green), whether the end of 
the current block is approaching (yellow), or whether she has already entered the next time 
block (red). LEDs 318 could also indicate which type of connection the user has established, 
e.g., USB or Ethernet 

As mentioned above and as shown in Fig. 3b, HEM 124 may be thought of as an 
enhanced router which routes data packets to and from IRMs 104, controls network access, 
serves as a bridge for Ethernet data transmitted over the hotel's single twisted pair 
infrastructure, and, according to some embodiments, handles address translation and 
assignment. According to various embodiments, the functionalities of HEM 124 may be 
implemented using functionalities available in, for example, a 2611 router and a Catalyst 2900 
Ethernet switch from Cisco Systems, Inc. HEM 124 includes a master central processing unit 
(CPU) 352, low and medium speed interfaces 354, and high-speed interfaces 356. When 
acting under the control of appropriate software or firmware, the CPU 352 is responsible for 
such router tasks as routing table computations and network management. It may also be 
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responsible for controlling network access and transmissions, etc. It preferably accomplishes 
all these functions under the control of software including an operating system (e.g., the 

Internet Operating System (IOS®) of Cisco Systems, Inc.) and any appropriate applications 
software, CPU 352 may include one or more microprocessor chips 358. In a specific 
5 embodiment, a memory 360 (such as non- volatile RAM and/or ROM) also forms part of CPU 
352. However, there are many different ways in which memory could be coupled to the 
system 

The interfaces 354 and 356 are typically provided as interface cards (sometimes 
referred to as "line cards")- Generally, they control the sending and receipt of data packets 

10 over the network and sometimes support other peripherals used with HEM 124. The low and 
medium speed interfaces 354 include amultiport communications interface 362, a serial 
communications interface 364, and a token ring interface 366. The high-speed interfaces 356 
include an FDDI interface 368 and a multiport Ethernet interface 370. Preferably, each of 
these interfaces (low/medium and high-speed) includes (1) ports for communication with the 

15 appropriate media, (2) an independent processor, and in some instances (3) volatile RAM. 

The independent processors control such communications intensive tasks as packet switching, 
media control and management. By providing separate processors for the communications 
intensive tasks, this architecture permits the master microprocessor 352 to efficiently perform 
routing computations, network diagnostics, security functions, etc. 

20 The low and medium speed interfaces 354 are coupled to the master CPU 352 

through a data, control, and address bus 372. High-speed interfaces 356 are connected to the 
bus 372 through a fast data, control, and address bus 374 which is in turn connected to a bus 
controller 376. 
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Although the system shown in Fig. 3b is one type of router by which the present 
invention may be implemented, it is by no means the only router architecture by which the 
present invention may be implemented. For example, an architecture having a single 
processor that handles communications as well as routing computations, etc. would also be 
acceptable. Further, other types of interfaces and media could also be used with the router. 

Regardless of network device's configuration, it may employ one or more memories 
or memory modules (including memory 360) configured to store program instructions for the 
network operations and network access and control functions described herein. The program 
instructions may specify an operating system and one or more applications, for example. 
Such memory or memories may also be configured to store, for example, control information 
for controlling in-room control systems, etc. 

Because such information and program instructions may be employed to implement 
the systems/methods described herein, the present invention relates to machine readable media 
that include program instructions, state information, etc. for performing various operations 
described herein. Examples of machine-readable media include, but are not limited to, 
magnetic media such as hard disks, floppy disks, and magnetic tape; optical media such as 
CD-ROM disks; magneto -optical media such as floptical disks; and hardware devices that are 
specially configured to store and perform program instructions, such as read-only memory 
devices (ROM) and random access memory (RAM). The invention may also be embodied in 
a carrier wave travelling over an appropriate medium such as airwaves, optical lines, electric 
lines, etc. Examples of program instructions include both machine code, such as produced by 
a compiler, and files containing higher level code that may be executed by the computer using 
an interpreter. 

Referring back to Fig. 3b, HEM 124 has a plurality of ports 126 each of which 
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communicates with a corresponding IRM 104. HEM 124 has the ability to sense when any of 
ports 126 are being used so that the hotel may bill the user accordingly. This monitoring 
feature is also useful for technical support, network bandwidth requirement estimates, billing 
estimates, and buying pattern data. HEM 124 also has the capability of enabling and disabling 
5 individual ports 126. Where network 100 is part of a wide area network (as discussed 
below), the monitoring, enabling, and disabling of ports 126 may be done from a remote 
server at the center of the WAN. 

As described above, each HEM port 126 (and thus the corresponding IRM 104) has a 
fixed CP address which may be configured using any of a variety of network management 
10 protocols such as, for example, SNMP. The fixed IP address of the HEM port 126 and the 
IRM 104 is assigned to the guest's computer using DHCP. Alternatively, an address 
translation is performed between the computer's internal IP address and the fixed IP address 
of IRM 104/HEM port 126. HEM 124 has a small boot ROM 378 for basic IP 
communications and a large flash ROM 380 for fully functional software and configuration 
15 data. This allows for remote software upgrades using, for example, an encrypted protocol 
riding on top of IP. 

According to various embodiments, HEM 124 also comprises transmission circuitry 
3 16 for transmitting and receiving data on a single twisted pair of conductors. Thus, the 
Ethernet data which has been combined with the standard telephone signals at IRM 104 may 
20 be picked off and reconfigured for transmission according to standard Ethernet techniques. 
Also, data headed to IRM 104 may be combined for transmission over the single twisted pair. 
As with transmission circuitry 308, transmission circuitry 316 may be implemented according 
to the home PNA standard. 

Fig. 5 is a block diagram illustrating the provision of high speed data and Internet 
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access to guest rooms in a chain of hotels 502 according to one embodiment of the invention. 
Using the internal infrastructure described above with reference to Fig. 1, each hotel 502 has 
a local area network (LAN) (not shown) which provides direct access to the Internet 504 for 
each of its guest rooms. According to this embodiment, each hotel 502 must provide its own 
security in the form of a firewall 506 for the protection of its LAN. 

Fig. 6 is a block diagram illustrating the provision of high speed data and Internet 
access to guest rooms in a chain of hotels 602 according to another embodiment of the 
invention. Using the internal infrastructure described above with reference to Fig. 1, each 
hotel 602 has a LAN (not shown) which is then connected with other LANs in the other 
hotels 602 to form a wide area network (WAN) referred to herein as a virtual private network 
(VPN) 604. According to a specific embodiment, VPN 604 is built on an optical fiber 
backbone employing asynchronous transfer mode (ATM) technology to transmit data 
packets. It will be understood however that any of a variety of transmission protocols and 
infrastructures may be employed to transmit data in such a network without departing from 
the scope of the present invention. Such protocols may include but are not limited to frame 
relay, Ethernet, and FDDL Data are configured in the appropriate format as they leave each 
hotel 602 by a framer (not shown) which may be part of or associated with each hotel's 
router or file server. 

The embodiment of Fig. 6 provides several advantages over the embodiment described 
above with reference to Fig. 5. High speed access to the Internet requires some form of 
connection to the Internet such as, for example, a Tl or T3 line. Not only does such a 
connection require a hardware infrastructure to support it, it also necessitates some form of 
protection for the network in the form of, for example, a firewall. Thus, if each hotel 
property in a hotel chain were to be directly connected to the Internet (as shown in Fig. 5), 
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each property would need to have its own network hardware infrastructure, firewall, and the 
technical and administrative staff and functions to support the same. By contrast, with VPN 
604, access to the Internet 606 is provided via a single network center (represented by remote 
network operation center (NOC) server 608) at which one or more firewalls 610 and any 
other necessary networking hardware and equipment may be located and managed. 
According to a specific embodiment, a redundant network center is provided in a different 
city than the first against the event that one or the other goes down. 

Having each hotel property directly connected to the Internet is problematic for 
effecting control of the hotels from a central location. That is, the more each hotel LAN is 
amenable to control from a central location, the more vulnerable it is to hacking. With VPN 
604, security is complete and centralized control is virtually unlimited. This makes things like 
remote software upgrades convenient thus eliminating what might otherwise be significant 
field service costs. In addition, because much of the equipment is centrally located, the costly 
redundancy of equipment and support functions at each hotel property made necessary by the 
embodiment of Fig. 5 is avoided. 

Another important benefit of VPN 604 relates to the management of globally unique 
IP addresses. As mentioned above, there is a paucity of pools of globally unique IP addresses 
which are sufficiently large to accommodate each host on the networks of most medium to 
large size organizations. For example, one pool of class C addresses accommodates less than 
256 simultaneous users on a network. This might be sufficient at most hotels much of the 
time, but it is clear that there are foreseeable circumstances where it would not be. For 
example, as mentioned above, if a 1200 room hotel hosted an Internet technologies seminar it 
is highly likely that such a pool of addresses would not be sufficient. In addition, this scenario 
makes the assumption that each property in a hotel chain (some comprising over 1000 
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properties) could procure a pool of class C addresses. 

VPN 604 addresses this problem in that it spreads the IP address needs of each of the 
hotel properties over the resources of the entire wide area network. Thus, for example, a 
single class B pool of addresses might be used to accommodate all of the Internet access 
5 needs of an entire hotel chain even where the total number of rooms in the chain far exceeds 
the number of available globally unique IP addresses. That is, large bursts of IP address 
needs may occur simultaneously at dozens of the hotel properties without exhausting the 
nearly 64,000 globally unique addresses available in the class B pool. 

Other secure services may also be provided via VPN 604, For example, video 

10 teleconferencing- over-IP 612 and voice-over-IP communications 614 may be provided to 
hotel guests. Moreover, by arranging access to VPN 604 by corporate hosts 616, individual 
employees of those corporations can have secure access to their employer's network from 
remote locations. Other services such as, for example, property management services 618 
may be provided to the management of hotels 602. 

15 According to a specific embodiment, the processing power of the in-room module of 

the present invention, e.g., IRM 104 of Fig. 3a, is employed to effect a variety of advanced IP 
and HTML processing functions. According to various embodiments, such functions may 
relate to the monitoring, tagging, and redirection of network traffic. One such function 
relates to the manner in which web sites and portals track the source of traffic referred to 

20 their sites. 

Many e-commerce web sites offer a share of their revenues to sites which refer user 
traffic. These referrals are typically accomplished through links to the e-commerce sites 
embedded in the pages of the referring site. Traffic referred by such mechanisms typically 
includes an affiliate tag identifying the referring site. It is through the use of affiliate tags that 
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the target e-commerce sites track the source of referred traffic and detennine the 
compensation owed the various referring affiliate sites. 

One shortcoming of the above-described approach relates to the fact that the revenue 
opportunity may be lost by the referring site if the user employs some other mechanism than 
the provided link to access the target site. For example, if the user simply types the target site 
URL directly into his browser, the request is not tagged as originating from the affiliate site, 
even where the linking page of the affiliate site is currently being viewed by the user. 
Therefore, according to a specific embodiment of the invention, the IRM is configured to 
monitor requests originating from the associated computer and add affflitate link ID tags to 
appropriate requests whether they originated from selection of a hyperlink or direct typing of 
the URL. 

More generally ? the IRM of the present invention may be configured to monitor the 
traffic originating from the connected host and process the request in accordance with a 
predetermined protocol depending on the nature of the traffic being monitored. That is, 
because of the processing power in the IRM and the fact that only one computer is typically 
associated with each IRM, the traffic associated with the computer can be analyzed in very 
detailed ways, far more detailed in fact than is practicable for the traffic flowing through a 
typical network node, e.g. , a router, which may correspond to hundreds or even thousands of 
user. 

Fig. 7 is a flowchart 700 illustrating another method for providing high speed data and 
Internet access to guest rooms in a hotel using the system of Fig. 1 . When a guest' s 
computer connects to an IRM in any one of the guest rooms, the network IP address 
associated with that IRM is associated with the computer (704). As discussed above, this 
association could mean a DHCP assignment of the network IP address to the guest's 
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computer where the computer did not already have an internal IP address. It could also mean 
that the internal IP address of the computer is translated into the network IP address. This 
address assignment/translation may be effected by either of the IRM and the HEM. In 
addition, it will be understood that depending on where the assignment/translation occurs it 
5 may precede or follow 706 described below. The network IP address is associated with the 
guest's computer while it remains connected to the IRM. 

The data from the guest's computer are then configured for transmission over the 
hotel wiring infrastructure (706). So, for example, where the transmission line connecting the 
IRM to the hotel network comprises a single twisted pair of conductors, e.g., a standard 

10 phone line, the data communications between the IRM and the HEM are configured so that 
they may be transmitted substantially simultaneously over the single twisted pair with the 
standard telephone signals from the phone in the guest room This may be accomplished, for 
example, using standard well know DSL techniques. Alternatively, where the hotel is more 
up-to-date and includes a network communications infrastructure, the data may be 

15 transmitted according to any of a wide variety of network transmission protocols, e.g., 
Ethernet. 

Once the connection is established, the communications between the IRM and the 
HEM are monitored either periodically or continuously for a variety of purposes (708). This 
information may be used by the hotel for billing purposes or for troubleshooting and 
2 o improving the reliability of the hotel network. 

If an Internet transaction is requested by the guest's computer, a globally unique IP 
address from a pool of such addresses is temporarily associated with the network IP address 
currently associated with the guest's computer using, for example, a network address 
translation protocol (710). As discussed above, the pool of addresses could be, for example, 
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class A, B, or C addresses. As will be discussed above with reference to Figs. 5 and 6, the 
temporary association of the globally unique IP address may be done by the HEM in the hotel 
or, according to another embodiment, by a remote server which interconnects one or more 
hotel properties in a wide area network. 
5 The data transmissions to and from each computer connected to each IRM may be 

monitored to effect a variety of functions (712). That is, because of the processing power 
available at the IRM, these data transmissions may be evaluated on any network protocol 
level, e.g., right down to an HTML string, to determine, for example, the destination to which 
the transmissions are directed or from which the transmissions originated. This information 

1 o may then be used to process the transmissions in a wide variety of ways ranging from very 
simple to highly sophisticated (714). 

Because of the processing power available in the IRM, the monitoring of the 
transmissions from the guest's computer may be accomplished with varying levels of 
sophistication. That is, information about these transmissions may be determined by 

15 evaluating the transmissions on any network communication protocol layer, i.e., from the 

physical to the application layer. So, for example, the CRM could identify the port to which a 
transmission is directed, e.g., port 80, by referring to the network layer. Alternatively, the 
IRM could identify the web site to which a transmission is directed by looking at the HTML 
string in a request. As will be understood, the possible ways in which the transmission may be 

20 monitored are limited only by the number of types of transmissions which could originate 
from or be directed to the guest's computer. 

The way in which the transmissions may then be processed are similarly diverse. For 
example, if the transmissions are monitored to determine the destination of a web request, this 
information may be used in a variety of ways. Again for example, where an affiliate 
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agreement exists between the destination site and the provider of the network services of the 
present invention, an affiliate tag may be associated with the transmissions to the destination 
site. This may be accomplished by appending the affiliate tag to the HTML string designating 
the destination site. 

5 Alternatively, the information about the destination site could be employed to effect 

the generation of pop-up windows or the framing of web pages on the guest's computer with 
content relating in some way to the destination site. The content of such a frame or window 
might relate to the business of the destination site or that of a competitor. That is, if the 
computer user sends a request to the Coca-Cola® web site, the returned web pages could be 

1 o displayed with a promotional offer from Coca-Cola® or an advertisement from Pepsi®. 

The processing of the data transmission, whether it relates to tagging, framing, or 
some other type of processing may occur in the IRM itself, or may alternatively be 
accomplished at another network node (e.g., the HEM, or a local or remote server) by having 
the IRM redirect at least a portion of the transmissions through the processing node. So, for 
15 example, if the processing function relates to framing of web pages from specific destination 
sites, where transmissions from the guest computer are determined to be going to such a site, 
they may be redirected to the processing node which connects with the destination site and 
frames the pages it receives in response for presentation on the guest computer. 

In general, it will be understood that the above-described examples of the monitoring 

2 o and processing of transmissions to and from the guest computer are merely exemplary and 

that the present invention encompasses a great diversity of both functions. 

Referring back to Fig. 7, when the Internet transaction is complete (or when a timeout 
period expires during which no packets are sent or received) (716), the globally unique IP 
address is disassociated from the network IP address and put back in the pool for use in 
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facilitating subsequent Internet transactions from any of the hotel's guest rooms (718). The 
network IP address remains associated with the guest's computer until the session ends, e.g., 
the computer is disconnected from the IRM or powered down (720). 

While the invention has been particularly shown and described with reference to 
specific embodiments thereof, it will be understood by those skilled in the art that changes in 
the form and details of the disclosed embodiments may be made without departing from the 
spirit or scope of the invention. For example, many of the embodiments described herein 
have been described with reference to hotels. It will be understood, however, that the 
techniques employed by the present invention may be applied to a variety of structures and 
institutions such as, for example, schools, office buildings, and the like. In addition, several 
embodiment described herein employ single twisted pair wiring which is the standard 
telephone wiring found in most buildings. However, it will be understood that the 
techniques described herein may be implemented on any of a wide variety of wiring 
infrastructures including, for example, Ethernet and ATM systems. Therefore, the scope of 
the invention should be determined with reference to the appended claims. 



